PROBLEMS 
OF MANAGEMENT 


IN THE 21* CENTURY 
Vol. 10, No. 2, 2015 





MANAGEMENT CHALLENGES IN THE 
CONTEXT OF RISK CULTURE 


Iwona Gorzenh-Mitka 
Czestochowa University of Technology, Czestochowa, Poland 
E-mail: iwona.mitka@zim.pcz.pl 


In recent years (especially in the context of the financial sector) we can find many debates 
(public and academic) which emphasise the need to change mindsets in management (Gorzen- 
Mitka, 2012). This discussion is a result of the dynamically changing external and internal 
conditions of the functioning of organizations. At the same time, we observe great progress 
over the past decade in developing effective tools and techniques for managing (also risk and 
complexity) within organizations. But management is carried out by people. Their awareness of 
threats and opportunities determines the effectiveness of the whole management process within 
the organization. One of the themes of this discussion is to indicate the need for changes in the 
area of organizational culture by creating the so-called risk culture. 

How Xenikou and Simosi (2006) indicate organizational culture directly influences the 
business performance of a company. In today’s business activity, a company needs to establish 
a conscious risk culture as part of its corporate culture in order to stay competitive. But what is 
risk culture? There are many definitions of “risk culture” (most of them we can find in practice 
literature - IRM 2012, ITF 2009), but they have some common elements, namely a focus on the 
habits and routines which are relevant to risk taking and its mitigation. Culture is most often 
associated with operational risk and governance (Acharyya & Johnson, 2006). But it seems that 
companies can only effectively implement real cultural change if they are aware of their current 
risk culture and how well it is aligned to their risk profile and objectives. Risk culture is not 
static and should be actively challenged to encourage continuous improvement (Gorzen-Mitka, 
2013). 

Also, national and international regulators are placing greater emphasis on companies’ 
ability to demonstrate that they have an effective risk management culture. Markets and rating 
agencies increasingly appreciate that the state of a company’s risk culture impacts its value 
(Davidson et al. 2012). For example, according to Standard & Poor’s (2007), in a positive risk 
management culture, risk and risk management are important considerations in the everyday 
aspects of corporate decision-making. To evaluate the strength of an insurer’s risk management 
culture, we look at organisational and governance structures for the management of risks, and 
at communication of risk and risk management. 

In spite of the fact that risk culture is such an important issue, we are still missing 
empirical support for this area. In one of the first attempts to describe this extensive and 
important concept in a single model, in 2012 the Institute of Risk Management published the 
first large practical document. This included a formative model which defines risk culture, 
describes ways to measure it and states areas that are important for a good risk culture. One 
unique academic study is “Risk Governance, Structures, Culture and Behaviour: A View from 
the Inside” by Elizabeth Sheedy and Barbara Griffin (2015) from Macquarie University. Their 
study explores risk governance structures, culture and behaviour using employee survey data 
(22,145 employees in 222 business units from six major commercial banks headquartered in 
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Australia and Canada). The study highlights the limitations of risk governance, as measured by 
publically available indicators, for producing consistently desirable risk behaviour. 

It should be added that risk culture is a cross-disciplinary issue made up by a number of 
disciplines, e.g. from sociology, psychology, through to management theory. And still, however, 
many questions remain in this area. For example: how to effectively measure risk culture?, how 
to adapt the model to the specific nature and size of an organization? And certainly, the question 
of risk culture requires changes in modern management and continuous research. 

However, it isn’t disputed that the change in risk awareness within the organization is 
still a difficult task. It seems that the development of management without a risk culture view is 
not possible. Include the risk culture and its effects (opportunities and threats) make it possible 
to find the opportunity in modern management. 

I hope that the discussion above will encourage you to take the risk of getting acquainted 
with the latest studies on the issues of management of modern organizations and that you will 
find “added value” in them for yourselves. 
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